Destination-nat Rule Without inbound-interface

Hi,

Can I create dstnat rules without specifying the inbound-interface?

set nat destination rule 99 destination address '8.8.8.8'
set nat destination rule 99 destination port '53'
set nat destination rule 99 inbound-interface 'eth0.110'
set nat destination rule 99 protocol 'udp'
set nat destination rule 99 translation address 'xxx.xxx.24.10'
set nat destination rule 99 translation port '53'

I have a need to redirect all opendns traffic to our dns, but the problem is when there are too many users pppoe / interface, so I have to create rules one by one for each interface.

for example on a mikrotik router you can create rules without having to specify a specific interface
ip firwall nat add action=redirect chain=dstnat dst-address-list=opendns dst-port=53 protocol=udp src-address-list=!bypass-open-dns to-ports=53

Thanks.

It is necessary to declare interface or NOT interface, for example not wan interface.

Can it be made with interface-list or address-list only? because if there are 1000 PPPoe users then 1000 rules are needed too.

[image]

As I mentioned above you can use NOT interface, just one rule

inbound-interface '!eth2'
Where eth2 for example wan port. So it will be work for all interfaces except eth2